last executing test programs: 17.025796211s ago: executing program 3 (id=774): socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 15.643912412s ago: executing program 3 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd2b, 0x4000, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x801}}}]}, 0x3c}}, 0x24004000) 14.194063596s ago: executing program 3 (id=783): syz_open_dev$char_usb(0xc, 0xb4, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) 12.039044151s ago: executing program 1 (id=790): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000002380)=""/185) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001c40)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 12.002273627s ago: executing program 4 (id=791): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x3eaf, 0x0) madvise(&(0x7f0000276000/0x4000)=nil, 0x4000, 0x65) 10.171592232s ago: executing program 1 (id=793): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 10.170745741s ago: executing program 4 (id=794): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xfffffffffffffff5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') read$FUSE(r3, &(0x7f0000000840)={0x2020}, 0x2020) 10.163140882s ago: executing program 0 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 9.327403709s ago: executing program 2 (id=796): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x3008cc, &(0x7f0000000600)=ANY=[], 0x1, 0x4439, &(0x7f000000cd00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r5 = syz_io_uring_setup(0xf2e, &(0x7f00000000c0)={0x0, 0x3725, 0x0, 0x0, 0x37c, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.812511243s ago: executing program 0 (id=797): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@none, 0x7e, 0x8, 0x8}}}, 0xc) 7.81196733s ago: executing program 1 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000001c0)={0xfffa, 0x3, 0x8, 0x543, r5}, 0x10) 7.811629327s ago: executing program 4 (id=799): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) fcntl$setstatus(r1, 0x4, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x4000800) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r3, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r5, 0x0, 0x2fff, 0x0, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xa, 0x1, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000001000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d2e6807b84e8e5155def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3dae9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a51bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc39343794be67a9a0895571e597ac8846f945ffb372a88d3a2b46307001416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607f259b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62b1eb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990548a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000800"}) 6.655646696s ago: executing program 1 (id=800): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0) 6.089248804s ago: executing program 0 (id=801): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) 5.400282015s ago: executing program 4 (id=802): socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) 5.172374221s ago: executing program 1 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r5, 0x5}, 0x8) 5.17202939s ago: executing program 2 (id=804): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffcf6, 0x0, 0x0, 0x0) 5.170482288s ago: executing program 0 (id=805): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xf}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.258144572s ago: executing program 2 (id=806): getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={0x1}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.256897267s ago: executing program 4 (id=807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 4.211834305s ago: executing program 1 (id=808): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000009000)=r1, 0x4) 4.111608445s ago: executing program 2 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x8905, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 3.832543177s ago: executing program 3 (id=810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() prctl$PR_MCE_KILL(0x21, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.798595269s ago: executing program 0 (id=811): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x6}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x8914, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) close(r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x10) 2.650200913s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) 1.99843636s ago: executing program 3 (id=813): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.916404613s ago: executing program 0 (id=814): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x57, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 660.274683ms ago: executing program 2 (id=815): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@null) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f00000011c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="9aeee0197e5173c610111fc21285dc08f18da02ba109ac85c6af00fa3753f7219f090f3c804be8a957c93992b2cc7688b07a351f15257d3387216a9134a86cb39e1de13bb9aa93dd12330417526204d7b205465beb1b2022220efb7e77a7b6c852977e6591dbd52410644ae026f4075b5f2ee3c5b3bc1e37d11d3e133de8fbef417aa8c409ff445b9cdd1a2daa41b5e2af86f31119d04202829a6c06a62ab59860b0a4f8392a2bf8bcf09d291ac27931a8143d34b8d057aa442cc6000af332bd340a7ad5", @ANYRESDEC, @ANYRES64, @ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a75172bbf8cf256a108d756ee68844798521e40cb7b79636e94ee69be1636cc8199cdc2ab4041f65dc09845bd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87028e08ed924527c0e45f594c78d32118cd03202a883e839e190217f435cce97a41ff0eda9afe015d0df9434db6f3dbdd26ec5bf05ef5bc62dc5394cafeffbb0924096deb31937ae30db0e5edbcd49b9eaaac", @ANYRES8], 0x1, 0xda6, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a000100696e6e65720000003c00028008000240000000840800034000000010080004400002000f0800014000000000180005800e0001007d6d6d656469617465000000040002800900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x80, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 615.036367ms ago: executing program 4 (id=816): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 0s ago: executing program 3 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 37.994169][ T6507] cgroup: Unknown subsys name 'net' [ 38.094760][ T6507] cgroup: Unknown subsys name 'cpuset' [ 38.098415][ T6507] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 38.327759][ T6507] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 39.738254][ T6519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.740225][ T6519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.742797][ T6519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.747997][ T6519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.750447][ T6519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.821293][ T6519] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.825126][ T6519] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.827626][ T6519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.830614][ T6519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.833142][ T6519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.855447][ T6528] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.858022][ T6528] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.860442][ T6528] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.863511][ T6528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.866096][ T6528] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.868462][ T6528] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.880621][ T6531] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.881060][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.881710][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.884352][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.885337][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 39.898977][ T6086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 39.903597][ T6086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 39.906320][ T6086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 39.908712][ T6086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.202203][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 40.217099][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 40.261337][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 40.308139][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 40.382387][ T6524] chnl_net:caif_netlink_parms(): no params data found [ 40.402331][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.402475][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.402608][ T6517] bridge_slave_0: entered allmulticast mode [ 40.403523][ T6517] bridge_slave_0: entered promiscuous mode [ 40.405432][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.405486][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.405586][ T6517] bridge_slave_1: entered allmulticast mode [ 40.406457][ T6517] bridge_slave_1: entered promiscuous mode [ 40.437458][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.439570][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.441815][ T6526] bridge_slave_0: entered allmulticast mode [ 40.444333][ T6526] bridge_slave_0: entered promiscuous mode [ 40.449888][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.452252][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.453274][ T6526] bridge_slave_1: entered allmulticast mode [ 40.454135][ T6526] bridge_slave_1: entered promiscuous mode [ 40.467277][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.505639][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.513237][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.513338][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.513599][ T6521] bridge_slave_0: entered allmulticast mode [ 40.514467][ T6521] bridge_slave_0: entered promiscuous mode [ 40.515871][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.515915][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.516039][ T6521] bridge_slave_1: entered allmulticast mode [ 40.516953][ T6521] bridge_slave_1: entered promiscuous mode [ 40.517375][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.517418][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.517512][ T6523] bridge_slave_0: entered allmulticast mode [ 40.518417][ T6523] bridge_slave_0: entered promiscuous mode [ 40.519846][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.519891][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.520014][ T6523] bridge_slave_1: entered allmulticast mode [ 40.520898][ T6523] bridge_slave_1: entered promiscuous mode [ 40.568034][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.573098][ T6517] team0: Port device team_slave_0 added [ 40.593115][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.604115][ T6517] team0: Port device team_slave_1 added [ 40.606426][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.608239][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.615973][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.659189][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.669175][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.669285][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.669401][ T6524] bridge_slave_0: entered allmulticast mode [ 40.670264][ T6524] bridge_slave_0: entered promiscuous mode [ 40.672313][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.672361][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.672467][ T6524] bridge_slave_1: entered allmulticast mode [ 40.677767][ T6524] bridge_slave_1: entered promiscuous mode [ 40.678551][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.678577][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.678617][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.681003][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.681030][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.681063][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.687525][ T6526] team0: Port device team_slave_0 added [ 40.689071][ T6526] team0: Port device team_slave_1 added [ 40.690969][ T6521] team0: Port device team_slave_0 added [ 40.719928][ T6523] team0: Port device team_slave_0 added [ 40.734157][ T6521] team0: Port device team_slave_1 added [ 40.748693][ T6523] team0: Port device team_slave_1 added [ 40.778328][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.790924][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.790985][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.791041][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.795499][ T6517] hsr_slave_0: entered promiscuous mode [ 40.796036][ T6517] hsr_slave_1: entered promiscuous mode [ 40.797332][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.797359][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.797396][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.799206][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.825874][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.825935][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.825973][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.840060][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.840121][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.840158][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.854941][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.854996][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.855290][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.856917][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.856943][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.856976][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.891202][ T6526] hsr_slave_0: entered promiscuous mode [ 40.893477][ T6526] hsr_slave_1: entered promiscuous mode [ 40.894172][ T6526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.894249][ T6526] Cannot create hsr debugfs directory [ 40.895842][ T6524] team0: Port device team_slave_0 added [ 40.916943][ T6524] team0: Port device team_slave_1 added [ 40.974884][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.974948][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.975010][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.976149][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.976175][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.976210][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.003115][ T6521] hsr_slave_0: entered promiscuous mode [ 41.005271][ T6521] hsr_slave_1: entered promiscuous mode [ 41.007410][ T6521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.009720][ T6521] Cannot create hsr debugfs directory [ 41.030660][ T6523] hsr_slave_0: entered promiscuous mode [ 41.031248][ T6523] hsr_slave_1: entered promiscuous mode [ 41.031599][ T6523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.031627][ T6523] Cannot create hsr debugfs directory [ 41.068602][ T6524] hsr_slave_0: entered promiscuous mode [ 41.069131][ T6524] hsr_slave_1: entered promiscuous mode [ 41.069464][ T6524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.069494][ T6524] Cannot create hsr debugfs directory [ 41.315802][ T6517] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.320668][ T6517] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.333549][ T6517] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.348765][ T6517] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.389436][ T6521] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.397310][ T6521] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.401513][ T6521] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.410825][ T6521] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.458926][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.477467][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.482863][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.497035][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.521244][ T6524] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.529235][ T6524] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.534055][ T6524] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.544892][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.547281][ T6524] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.578863][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.583943][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.605911][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.606059][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.609007][ T6523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.622853][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.625326][ T6523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 41.641095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.641224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.643239][ T6523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 41.650301][ T6523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 41.669191][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.669264][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.688539][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.688628][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.736490][ T6521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.768198][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.777872][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.796718][ T239] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.796809][ T239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.797698][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.797741][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.849386][ T6524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.860554][ T52] Bluetooth: hci1: command tx timeout [ 41.860557][ T6086] Bluetooth: hci0: command tx timeout [ 41.865801][ T6524] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.880317][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.880398][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.881341][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.881384][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.924082][ T52] Bluetooth: hci3: command tx timeout [ 41.927151][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.933921][ T52] Bluetooth: hci2: command tx timeout [ 41.985284][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.005196][ T52] Bluetooth: hci4: command tx timeout [ 42.029724][ T6517] veth0_vlan: entered promiscuous mode [ 42.036830][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.040031][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.058549][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.058619][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.064796][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.064864][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.079462][ T6517] veth1_vlan: entered promiscuous mode [ 42.123186][ T6523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.157196][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.175928][ T6517] veth0_macvtap: entered promiscuous mode [ 42.181806][ T6517] veth1_macvtap: entered promiscuous mode [ 42.208464][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.211514][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.219214][ T6524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.225610][ T6517] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.225701][ T6517] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.225732][ T6517] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.225762][ T6517] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.255716][ T6526] veth0_vlan: entered promiscuous mode [ 42.260280][ T6526] veth1_vlan: entered promiscuous mode [ 42.310200][ T6526] veth0_macvtap: entered promiscuous mode [ 42.318490][ T6526] veth1_macvtap: entered promiscuous mode [ 42.379605][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.381467][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.386511][ T6526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.389033][ T6526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.389718][ T6526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.389751][ T6526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.395655][ T6524] veth0_vlan: entered promiscuous mode [ 42.408731][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.408819][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.412865][ T6524] veth1_vlan: entered promiscuous mode [ 42.429009][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.467920][ T6523] veth0_vlan: entered promiscuous mode [ 42.473756][ T6523] veth1_vlan: entered promiscuous mode [ 42.487863][ T6521] veth0_vlan: entered promiscuous mode [ 42.496518][ T6524] veth0_macvtap: entered promiscuous mode [ 42.514574][ T6524] veth1_macvtap: entered promiscuous mode [ 42.518167][ T6521] veth1_vlan: entered promiscuous mode [ 42.523936][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.524001][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.528896][ T6523] veth0_macvtap: entered promiscuous mode [ 42.548384][ T6523] veth1_macvtap: entered promiscuous mode [ 42.557684][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.580474][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.580530][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.588423][ T6524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.605670][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.609050][ T6521] veth0_macvtap: entered promiscuous mode [ 42.620233][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.623664][ T6521] veth1_macvtap: entered promiscuous mode [ 42.625506][ T6524] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.625548][ T6524] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.625579][ T6524] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.625609][ T6524] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.646627][ T6517] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.653908][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.653974][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.661803][ T6523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.662023][ T6523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.666096][ T6523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.666142][ T6523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.675617][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.681142][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.685068][ T6521] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.687912][ T6521] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.687981][ T6521] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.688019][ T6521] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.734560][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.734621][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.846651][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.846708][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.869760][ T239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.869814][ T239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.892406][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.892458][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.910516][ T6628] fuse: root generation should be zero [ 42.926656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.926719][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.956078][ T239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.956148][ T239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.998048][ T6634] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 43.198559][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.202932][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.072003][ T52] Bluetooth: hci1: command tx timeout [ 44.072112][ T52] Bluetooth: hci0: command tx timeout [ 44.072169][ T52] Bluetooth: hci2: command tx timeout [ 44.072210][ T52] Bluetooth: hci3: command tx timeout [ 44.082191][ T6086] Bluetooth: hci4: command tx timeout [ 44.145072][ T6642] netfs: Couldn't get user pages (rc=-14) [ 46.086539][ T6086] Bluetooth: hci3: command tx timeout [ 46.086616][ T6086] Bluetooth: hci2: command tx timeout [ 46.086669][ T6086] Bluetooth: hci0: command tx timeout [ 46.086709][ T6086] Bluetooth: hci1: command tx timeout [ 46.164438][ T52] Bluetooth: hci4: command tx timeout [ 46.496858][ T6658] TCP: out of memory -- consider tuning tcp_mem [ 48.763851][ T52] Bluetooth: hci1: command tx timeout [ 48.763932][ T52] Bluetooth: hci0: command tx timeout [ 48.763988][ T52] Bluetooth: hci2: command tx timeout [ 48.764029][ T52] Bluetooth: hci3: command tx timeout [ 48.764068][ T52] Bluetooth: hci4: command tx timeout [ 50.080882][ T6699] loop3: detected capacity change from 0 to 8192 [ 50.250072][ T6510] loop3: p1 < > p2 < p5 > p3 p4 [ 51.010434][ T6510] loop3: p3 start 83890176 is beyond EOD, truncated [ 51.019166][ T6510] loop3: p4 size 16776960 extends beyond EOD, truncated [ 51.029517][ T6510] loop3: p5 size 16776960 extends beyond EOD, truncated [ 51.224963][ T6699] loop3: p1 < > p2 < p5 > p3 p4 [ 51.230734][ T6699] loop3: p3 start 83890176 is beyond EOD, truncated [ 51.236940][ T6699] loop3: p4 size 16776960 extends beyond EOD, truncated [ 51.242203][ T6699] loop3: p5 size 16776960 extends beyond EOD, truncated [ 51.382348][ T6725] loop1: detected capacity change from 0 to 64 [ 52.299557][ T6731] loop0: detected capacity change from 0 to 128 [ 52.519191][ T6731] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.733819][ T6744] loop2: detected capacity change from 0 to 2048 [ 52.764161][ T6747] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.840474][ T6526] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.849290][ T6753] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 54.273837][ T6749] udevd[6749]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 54.860139][ T6758] udevd[6758]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 54.872776][ T6510] udevd[6510]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.071364][ T6756] udevd[6756]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.180851][ T6674] udevd[6674]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 55.208136][ T6756] udevd[6756]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 55.226560][ T6629] udevd[6629]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 55.318749][ T6749] udevd[6749]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 56.627729][ T6778] loop1: detected capacity change from 0 to 1764 [ 57.212893][ T6763] loop3: detected capacity change from 0 to 40427 [ 57.223024][ T6763] F2FS-fs (loop3): build fault injection rate: 771 [ 57.236476][ T6763] F2FS-fs (loop3): invalid crc value [ 57.454974][ T6763] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 57.725983][ T6782] process 'syz.0.40' launched '/dev/fd/3' with NULL argv: empty string added [ 58.782658][ T6791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 58.875094][ T6793] overlayfs: overlapping lowerdir path [ 59.406534][ T6747] NILFS (loop2): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 59.406636][ T6747] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=2) [ 59.411441][ T6747] Remounting filesystem read-only [ 59.422719][ T6523] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 59.542122][ T6796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 60.207668][ T6807] loop3: detected capacity change from 0 to 1764 [ 61.100742][ T6804] loop2: detected capacity change from 0 to 16 [ 61.115274][ T6804] erofs (device loop2): algorithm 1 isn't enabled on this kernel [ 61.259492][ T6811] loop1: detected capacity change from 0 to 1024 [ 62.051632][ T6822] loop2: detected capacity change from 0 to 1024 [ 62.056948][ T6822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.118329][ T6824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.52'. [ 62.127935][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.128766][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.983416][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.262522][ T6523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.344437][ T6837] loop0: detected capacity change from 0 to 2048 [ 64.346939][ T6837] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.478085][ T6837] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.483619][ T330] hfsplus: b-tree write err: -5, ino 4 [ 64.494076][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494213][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.694573][ T6843] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 64.728272][ T6843] EXT4-fs (loop0): Remounting filesystem read-only [ 66.082504][ T6858] ptrace attach of "./syz-executor exec"[6517] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[6858] [ 66.254942][ C0] vkms_vblank_simulate: vblank timer overrun [ 68.753022][ T6877] syz_tun: entered allmulticast mode [ 68.784433][ T6877] syz_tun: left allmulticast mode [ 68.818069][ T6877] loop4: detected capacity change from 0 to 512 [ 68.839171][ T6877] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.846785][ T6877] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 68.852322][ T6877] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.64: inode #15: comm syz.4.64: iget: illegal inode # [ 68.856477][ T6877] EXT4-fs (loop4): Remounting filesystem read-only [ 68.859225][ T6877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.889931][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 68.890056][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 68.896293][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.896607][ T6879] bridge0: port 2(bridge_slave_1) entered listening state [ 68.896743][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.896796][ T6879] bridge0: port 1(bridge_slave_0) entered listening state [ 68.918836][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.008504][ T6521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.197102][ T6888] loop4: detected capacity change from 0 to 128 [ 69.872536][ T11] cfg80211: failed to load regulatory.db [ 69.889136][ T6895] loop2: detected capacity change from 0 to 512 [ 69.945167][ T6895] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 69.971659][ T6895] EXT4-fs (loop2): invalid journal inode [ 69.974716][ T6895] EXT4-fs (loop2): can't get journal size [ 70.106236][ T6898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 70.117929][ T6895] EXT4-fs (loop2): 1 truncate cleaned up [ 70.120790][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.160788][ T6895] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.081432][ T6908] loop1: detected capacity change from 0 to 1024 [ 71.152486][ T6908] hfsplus: failed to load root directory [ 71.675631][ T6909] loop4: detected capacity change from 0 to 64 [ 71.678097][ T6909] ======================================================= [ 71.678097][ T6909] WARNING: The mand mount option has been deprecated and [ 71.678097][ T6909] and is ignored by this kernel. Remove the mand [ 71.678097][ T6909] option from the mount to silence this warning. [ 71.678097][ T6909] ======================================================= [ 71.799491][ T6909] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 71.844021][ T6911] capability: warning: `syz.1.76' uses deprecated v2 capabilities in a way that may be insecure [ 71.994839][ T6919] loop1: detected capacity change from 0 to 256 [ 72.000142][ T6919] exfat: Deprecated parameter 'namecase' [ 72.001992][ T6919] exfat: Deprecated parameter 'codepage' [ 72.004113][ T6919] exfat: Bad value for 'codepage' [ 72.081092][ T6924] loop1: detected capacity change from 0 to 1024 [ 72.085709][ T6924] EXT4-fs: Ignoring removed nobh option [ 72.129080][ T6913] loop4: detected capacity change from 0 to 1024 [ 72.132505][ T6913] ext4: Unknown parameter 'fsmagic' [ 72.154649][ T6924] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 72.872943][ T6923] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.986699][ T6930] binder: BINDER_SET_CONTEXT_MGR already set [ 72.986815][ T6930] binder: 6929:6930 ioctl 4018620d 20000040 returned -16 [ 72.987600][ T6930] binder: tried to use weak ref as strong ref [ 72.987660][ T6930] binder: 6929:6930 Acquire 1 refcount change on invalid ref 0 ret -22 [ 72.988084][ T6930] binder: 6929:6930 got transaction to invalid handle, 1 [ 72.988164][ T6930] binder: 6930:6929 cannot find target node [ 72.988193][ T6930] binder: 6929:6930 transaction async to 0:0 failed 3/29201/-22, code 0 size 72-24 line 3152 [ 72.993459][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.385918][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.386324][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.521750][ T6949] Zero length message leads to an empty skb [ 74.648856][ T6947] loop4: detected capacity change from 0 to 4096 [ 74.891429][ T6947] ntfs3(loop4): ino=b, mi_enum_attr [ 74.895402][ T6947] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 74.898814][ T6947] ntfs3(loop4): Failed to load $Extend (-22). [ 74.900714][ T6947] ntfs3(loop4): Failed to initialize $Extend. [ 75.651367][ T6947] ntfs3(loop4): try to read out of volume at offset 0x3fffffc7000 [ 75.651605][ T6947] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 75.702996][ T6958] warning: `syz.3.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.241593][ T6978] capability: warning: `syz.0.96' uses 32-bit capabilities (legacy support in use) [ 77.255866][ T6086] Bluetooth: Wrong link type (-71) [ 77.255998][ T6086] Bluetooth: Unknown BR/EDR signaling command 0x00 [ 77.256029][ T6086] Bluetooth: Wrong link type (-22) [ 77.438452][ T6988] loop2: detected capacity change from 0 to 128 [ 77.456859][ T6988] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.480457][ T6988] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.606991][ T6990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'. [ 78.927451][ T31] audit: type=1326 audit(78.910:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7002 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755a8a8 code=0x7fc00000 [ 78.929015][ T31] audit: type=1326 audit(78.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7002 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8755a8a8 code=0x7fc00000 [ 80.039327][ T7020] loop0: detected capacity change from 0 to 1024 [ 80.070248][ T7020] syz.0.104: attempt to access beyond end of device [ 80.070248][ T7020] loop0: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 81.415441][ T7035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.585864][ T7028] loop3: detected capacity change from 0 to 32768 [ 81.680283][ T7028] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 81.684200][ T7044] bridge0: entered promiscuous mode [ 81.684360][ T7044] vlan2: entered promiscuous mode [ 81.811406][ T31] audit: type=1326 audit(81.780:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7002 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8755a8a8 code=0x7fc00000 [ 82.419641][ T7028] XFS (loop3): Ending clean mount [ 82.913262][ T7063] netlink: 'syz.0.112': attribute type 3 has an invalid length. [ 83.143548][ T7065] loop4: detected capacity change from 0 to 64 [ 83.995898][ T6524] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 84.318421][ T7076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.322487][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 84.323083][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 85.182219][ T7068] loop2: detected capacity change from 0 to 32768 [ 85.188227][ T7068] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.118 (7068) [ 85.316652][ T7068] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 85.316830][ T7068] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 85.316869][ T7068] BTRFS info (device loop2): using free-space-tree [ 85.484649][ T7106] binder: 7105:7106 tried to acquire reference to desc 0, got 1 instead [ 85.485719][ T7106] binder: 7105:7106 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.485778][ T7106] binder: 7106 RLIMIT_NICE not set [ 85.502118][ T6605] binder: undelivered TRANSACTION_COMPLETE [ 85.559323][ T7083] loop0: detected capacity change from 0 to 32768 [ 85.706832][ T7083] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 85.716029][ T6523] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.393970][ T7083] XFS (loop0): Ending clean mount [ 88.318083][ T7138] Cannot find add_set index 0 as target [ 89.116515][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.133'. [ 90.104359][ T6526] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 91.496285][ T7157] binder: 7156:7157 tried to acquire reference to desc 0, got 1 instead [ 91.499294][ T7157] binder: 7156:7157 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 91.499368][ T7157] binder: 7157 RLIMIT_NICE not set [ 91.499393][ T7157] binder: 7157 RLIMIT_NICE not set [ 91.517915][ T7157] binder: 7156:7157 BC_INCREFS_DONE node 11 has no pending increfs request [ 91.518061][ T7157] binder: 7157 RLIMIT_NICE not set [ 91.518227][ T7157] binder_alloc: 7156: binder_alloc_buf, no vma [ 91.518256][ T7157] binder: cannot allocate buffer: vma cleared, target dead or dying [ 91.518290][ T7157] binder: 7156:7157 transaction reply to 7156:7157 failed 14/29189/-3, code 0 size 0-0 line 3336 [ 91.518337][ T7157] binder: send failed reply for transaction 13 to 7156:7157 [ 91.536524][ T1803] binder: undelivered TRANSACTION_COMPLETE [ 91.536584][ T1803] binder: undelivered TRANSACTION_ERROR: 29189 [ 91.587894][ T24] binder: undelivered TRANSACTION_ERROR: 29190 [ 91.603226][ T7161] sock: sock_set_timeout: `syz.1.138' (pid 7161) tries to set negative timeout [ 91.642941][ T7161] loop1: detected capacity change from 0 to 128 [ 91.643916][ T7161] EXT4-fs: Ignoring removed i_version option [ 91.658159][ T7161] EXT4-fs warning (device loop1): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 91.658215][ T7161] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 92.530077][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.141'. [ 93.681557][ T7180] binder: 7179:7180 tried to acquire reference to desc 0, got 1 instead [ 94.007802][ T7183] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 94.011165][ T6518] binder: release 7179:7180 transaction 19 out, still active [ 94.077569][ T6518] binder: undelivered TRANSACTION_COMPLETE [ 94.122335][ T6518] binder: send failed reply for transaction 19, target dead [ 94.353418][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.353988][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.307164][ T7205] binder: 7204:7205 tried to acquire reference to desc 0, got 1 instead [ 95.307630][ T7205] binder: 7204:7205 got transaction with invalid parent offset or type [ 95.307688][ T7205] binder: 7204:7205 transaction async to 7204:0 failed 24/29201/-22, code 0 size 96-24 line 3545 [ 96.081261][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.087856][ T7188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.919168][ T7188] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.919238][ T7188] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.919291][ T7188] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.919328][ T7188] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.791962][ T7211] syz_tun: entered allmulticast mode [ 97.793041][ T7211] syz_tun: left allmulticast mode [ 97.857335][ T7224] loop2: detected capacity change from 0 to 1024 [ 97.874993][ T7224] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 97.917826][ T7224] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 97.926207][ T7224] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.157: Bad quota inode: 3, type: 0 [ 98.089709][ T7224] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 98.090127][ T7224] EXT4-fs (loop2): mount failed [ 99.012695][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 99.016135][ T6086] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 99.176126][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.181051][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.681896][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.681955][ C0] bridge0: topology change detected, propagating [ 99.682721][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.682766][ C0] bridge0: topology change detected, propagating [ 101.957965][ T7263] loop2: detected capacity change from 0 to 4096 [ 101.992888][ T7272] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.037689][ T7276] loop0: detected capacity change from 0 to 2048 [ 103.059698][ T7276] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 103.063268][ T7276] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 103.066098][ T7276] UDF-fs: Scanning with blocksize 512 failed [ 103.070637][ T7276] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.077443][ T7276] UDF-fs: Scanning with blocksize 1024 failed [ 103.111205][ T7276] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 103.111266][ T7276] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.111288][ T7276] UDF-fs: Scanning with blocksize 2048 failed [ 103.143870][ T7249] loop4: detected capacity change from 0 to 32768 [ 103.144435][ T7249] XFS: ikeep mount option is deprecated. [ 103.144465][ T7249] XFS: ikeep mount option is deprecated. [ 103.151023][ T7276] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.156254][ T7276] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 103.156311][ T7276] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.156333][ T7276] UDF-fs: Scanning with blocksize 4096 failed [ 103.156353][ T7276] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 103.186859][ T7249] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.276564][ T7278] loop1: detected capacity change from 0 to 32768 [ 103.296681][ T7278] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 103.325249][ T7278] XFS (loop1): Ending clean mount [ 103.366095][ T7249] XFS (loop4): Ending clean mount [ 103.374535][ T7249] XFS (loop4): Quotacheck needed: Please wait. [ 103.520715][ T7249] XFS (loop4): Quotacheck: Done. [ 103.758466][ T6521] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.439081][ T7291] loop2: detected capacity change from 0 to 40427 [ 104.442811][ T7291] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 104.442882][ T7291] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 104.546823][ T6517] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.558752][ T7291] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 104.558954][ T7291] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.199062][ T7325] loop1: detected capacity change from 0 to 64 [ 105.795304][ T7331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 109.061147][ T24] IPVS: starting estimator thread 0... [ 109.477341][ T7374] IPVS: using max 34 ests per chain, 81600 per kthread [ 109.747533][ T11] IPVS: starting estimator thread 0... [ 109.833237][ T7379] IPVS: using max 31 ests per chain, 74400 per kthread [ 111.518942][ T7395] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 111.527640][ T7395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.782500][ T7407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.790504][ T7407] batadv_slave_0: entered promiscuous mode [ 114.768102][ T7423] input: syz0 as /devices/virtual/input/input2 [ 115.045360][ T7435] tmpfs: Bad value for 'size' [ 115.865598][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 118.316460][ T7471] loop2: detected capacity change from 0 to 2048 [ 118.350873][ T7471] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 118.360455][ T7471] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.834623][ T7512] binder: 7511:7512 tried to acquire reference to desc 0, got 1 instead [ 121.837807][ T7512] binder: 7511:7512 got transaction with invalid data ptr [ 121.839950][ T7512] binder_debug: 1 callbacks suppressed [ 121.841543][ T7512] binder: 7511:7512 transaction async to 7511:0 failed 29/29201/-14, code 0 size 0-24 line 3439 [ 121.850192][ T7512] binder_alloc: 7511: pid 7511 spamming oneway? 1 buffers allocated for a total size of 5184 [ 121.854477][ T7512] binder: undelivered TRANSACTION_COMPLETE [ 121.886552][ T11] binder: undelivered transaction 30, process died. [ 121.979602][ T7514] loop1: detected capacity change from 0 to 1024 [ 122.023276][ T7514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.250959][ T7518] syz_tun: entered allmulticast mode [ 122.272584][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.240'. [ 123.302354][ T7518] syz_tun (unregistering): left allmulticast mode [ 124.168973][ T7544] syz.3.248 (7544): attempted to duplicate a private mapping with mremap. This is not supported. [ 124.223914][ T6645] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 124.835196][ T7552] loop4: detected capacity change from 0 to 16 [ 125.096919][ T7552] erofs (device loop4): mounted with root inode @ nid 36. [ 125.396733][ T6645] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.399832][ T6645] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.404373][ T6645] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 125.407058][ T6645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.409285][ T6645] usb 1-1: SerialNumber: syz [ 125.495773][ T6645] usb 1-1: 0:2 : does not exist [ 125.638220][ T7557] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 125.638283][ T7557] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 126.661478][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.661564][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.587405][ T31] audit: type=1326 audit(127.560:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7533 comm="syz.0.244" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa815a8a8 code=0x7fc00000 [ 127.749504][ T6645] usb 1-1: USB disconnect, device number 2 [ 127.876696][ T6749] udevd[6749]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.940971][ T7586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 127.941167][ T7586] IPv6: NLM_F_CREATE should be set when creating new route [ 127.955489][ T7586] lo: entered allmulticast mode [ 127.961144][ T7586] tunl0: entered allmulticast mode [ 127.969869][ T7586] gre0: entered allmulticast mode [ 128.106956][ T7586] gretap0: entered allmulticast mode [ 128.109823][ T7586] erspan0: entered allmulticast mode [ 128.432474][ T7590] 9pnet_fd: p9_fd_create_unix (7590): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 128.524222][ T7586] ip_vti0: entered allmulticast mode [ 128.587602][ T7586] ip6_vti0: entered allmulticast mode [ 128.598597][ T7586] sit0: entered allmulticast mode [ 128.610445][ T7586] ip6tnl0: entered allmulticast mode [ 128.621366][ T7586] ip6gre0: entered allmulticast mode [ 128.632459][ T7586] syz_tun: entered allmulticast mode [ 128.640948][ T7586] ip6gretap0: entered allmulticast mode [ 128.649883][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.650012][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.661557][ T7593] binder: 7591:7593 tried to acquire reference to desc 0, got 1 instead [ 128.663504][ T7586] bridge0: entered allmulticast mode [ 128.665985][ T7586] vcan0: entered allmulticast mode [ 128.669164][ T7586] bond0: entered allmulticast mode [ 128.669439][ T7586] bond_slave_0: entered allmulticast mode [ 128.669643][ T7586] bond_slave_1: entered allmulticast mode [ 128.673785][ T7586] team0: entered allmulticast mode [ 128.673828][ T7586] team_slave_0: entered allmulticast mode [ 128.674493][ T7586] team_slave_1: entered allmulticast mode [ 128.679525][ T7586] dummy0: entered allmulticast mode [ 128.694376][ T7586] nlmon0: entered allmulticast mode [ 128.696074][ T7586] caif0: entered allmulticast mode [ 128.696812][ T7586] batadv0: entered allmulticast mode [ 128.708580][ T7586] vxcan0: entered allmulticast mode [ 128.710495][ T7586] vxcan1: entered allmulticast mode [ 128.712110][ T7586] veth0: entered allmulticast mode [ 128.718422][ T7586] veth1: entered allmulticast mode [ 128.787298][ T24] binder: release 7591:7593 transaction 35 out, still active [ 128.792329][ T7599] loop0: detected capacity change from 0 to 512 [ 128.812869][ T7599] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.812924][ T7599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.829959][ T7599] EXT4-fs (loop0): 1 truncate cleaned up [ 128.847894][ T7599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.853882][ T7586] wg0: entered allmulticast mode [ 128.863478][ T6605] binder: send failed reply for transaction 35, target dead [ 128.971699][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.042683][ T7586] wg1: entered allmulticast mode [ 130.165568][ T7612] netlink: 48 bytes leftover after parsing attributes in process `syz.0.268'. [ 130.602173][ T7586] wg2: entered allmulticast mode [ 130.606551][ T7586] veth0_to_bridge: entered allmulticast mode [ 130.624757][ T7586] veth1_to_bridge: entered allmulticast mode [ 130.652771][ T7586] veth0_to_bond: entered allmulticast mode [ 130.660829][ T7586] veth1_to_bond: entered allmulticast mode [ 130.665048][ T7586] veth0_to_team: entered allmulticast mode [ 130.671447][ T7586] veth1_to_team: entered allmulticast mode [ 130.684459][ T7586] veth0_to_batadv: entered allmulticast mode [ 130.686477][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.687279][ T7586] batadv_slave_0: entered allmulticast mode [ 130.689814][ T7586] veth1_to_batadv: entered allmulticast mode [ 130.692603][ T7586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.692870][ T7586] batadv_slave_1: entered allmulticast mode [ 130.697590][ T7586] xfrm0: entered allmulticast mode [ 130.701741][ T7586] veth0_to_hsr: entered allmulticast mode [ 130.705739][ T7586] hsr_slave_0: entered allmulticast mode [ 131.585753][ T6086] Bluetooth: hci4: command tx timeout [ 131.616488][ T7586] veth1_to_hsr: entered allmulticast mode [ 131.622654][ T7586] hsr_slave_1: entered allmulticast mode [ 131.626471][ T7586] hsr0: entered allmulticast mode [ 131.820994][ T7586] veth1_virt_wifi: entered allmulticast mode [ 131.844241][ T7586] veth0_virt_wifi: entered allmulticast mode [ 131.860206][ T7586] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 131.863499][ T7586] veth1_vlan: entered allmulticast mode [ 131.873874][ T7586] veth0_vlan: entered allmulticast mode [ 131.893993][ T7586] vlan0: entered allmulticast mode [ 131.895944][ T7586] vlan1: entered allmulticast mode [ 132.062330][ T7586] macvlan0: entered allmulticast mode [ 132.120197][ T7586] macvlan1: entered allmulticast mode [ 132.132164][ T7586] ipvlan0: entered allmulticast mode [ 132.132321][ T7586] ipvlan1: entered allmulticast mode [ 132.132858][ T7586] veth1_macvtap: entered allmulticast mode [ 132.141573][ T7586] veth0_macvtap: entered allmulticast mode [ 132.172082][ T7586] macvtap0: entered allmulticast mode [ 132.173947][ T7586] macsec0: entered allmulticast mode [ 132.188535][ T7632] loop4: detected capacity change from 0 to 256 [ 132.212523][ T7586] geneve0: entered allmulticast mode [ 132.322105][ T7586] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.325524][ T7586] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.328507][ T7586] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.331346][ T7586] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.374246][ T7586] geneve1: entered allmulticast mode [ 132.378728][ T7586] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 132.385028][ T7586] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 132.394606][ T7586] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 132.400893][ T7586] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 133.052015][ T6086] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 133.052222][ T6086] Bluetooth: hci4: Injecting HCI hardware error event [ 133.054479][ T6086] Bluetooth: hci4: hardware error 0x00 [ 133.177323][ T7586] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 133.183718][ T7586] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 133.190859][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 133.190985][ T7626] netlink: 40 bytes leftover after parsing attributes in process `syz.2.272'. [ 133.191321][ T7626] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 133.269823][ T7638] netlink: 'syz.3.277': attribute type 12 has an invalid length. [ 133.269894][ T7638] netlink: 'syz.3.277': attribute type 29 has an invalid length. [ 133.269917][ T7638] netlink: 148 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.269946][ T7638] netlink: 'syz.3.277': attribute type 2 has an invalid length. [ 133.269968][ T7638] netlink: 43 bytes leftover after parsing attributes in process `syz.3.277'. [ 135.462125][ T6086] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 137.623206][ T7681] binder: 7680:7681 tried to acquire reference to desc 0, got 1 instead [ 137.623742][ T7681] binder: 7680:7681 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 137.624036][ T7681] binder: 7681 RLIMIT_NICE not set [ 137.624080][ T7681] binder: 7681 RLIMIT_NICE not set [ 137.624368][ T7681] binder: 7680:7681 got reply transaction with bad transaction stack, transaction 40 has target 7680:7681 [ 137.624514][ T7681] binder: 7680:7681 transaction reply to 0:0 failed 41/29201/-71, code 0 size 0-0 line 3068 [ 137.660139][ T26] binder: release 7680:7681 transaction 40 out, still active [ 137.660205][ T26] binder: undelivered TRANSACTION_COMPLETE [ 137.660238][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.671308][ T7679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 137.702395][ T24] binder: release 7680:7681 transaction 40 in, still active [ 137.702449][ T24] binder: send failed reply for transaction 40, target dead [ 137.740822][ T7686] fuse: Bad value for 'fd' [ 138.950690][ T7696] netlink: get zone limit has 8 unknown bytes [ 140.666434][ T7727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.666745][ T7727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.695470][ T7731] netlink: 'syz.3.307': attribute type 1 has an invalid length. [ 142.080841][ T7731] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 142.267091][ T7731] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 143.369196][ T7731] bond1 (unregistering): Released all slaves [ 144.392610][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 148.274661][ T7794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.274975][ T7794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.948096][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 151.993280][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.331'. [ 151.993362][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.331'. [ 152.685701][ T7836] tipc: Started in network mode [ 152.685875][ T7836] tipc: Node identity 7f000001, cluster identity 4711 [ 152.686565][ T7836] tipc: Enabled bearer , priority 10 [ 154.350269][ T6605] tipc: Node number set to 2130706433 [ 154.431890][ T7848] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 154.432076][ T7848] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 154.640656][ T7851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 154.728573][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'. [ 154.728641][ T7851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 154.728688][ T7851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.338'. [ 155.876416][ T7875] loop0: detected capacity change from 0 to 256 [ 158.711128][ T7907] loop0: detected capacity change from 0 to 512 [ 158.714724][ T7907] ext4: Unknown parameter 'fsname' [ 159.782692][ T7918] tipc: Failed to remove unknown binding: 66,3,3/0:3123449750/3123449751 [ 159.789795][ T7918] tipc: Started in network mode [ 159.804724][ T7918] tipc: Node identity a18d, cluster identity 4711 [ 159.813351][ T7918] tipc: Node number set to 41357 [ 161.631519][ T7925] loop0: detected capacity change from 0 to 40427 [ 161.635311][ T7925] F2FS-fs (loop0): heap/no_heap options were deprecated [ 161.637739][ T7925] F2FS-fs (loop0): build fault injection rate: 19 [ 161.638646][ T7934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 161.642109][ T7925] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 161.659365][ T7925] F2FS-fs (loop0): invalid crc value [ 161.669395][ T7925] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 161.721716][ T7925] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 161.771351][ T7925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 161.789552][ T7925] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac [ 161.852396][ T7925] syz.0.363: attempt to access beyond end of device [ 161.852396][ T7925] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 161.853566][ T7925] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xe50/0x1678 [ 161.853666][ T7925] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 161.980376][ T7948] bridge1: entered allmulticast mode [ 162.047086][ T6526] syz-executor: attempt to access beyond end of device [ 162.047086][ T6526] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 162.047996][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 162.048016][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.048024][ T6526] Call trace: [ 162.048028][ T6526] show_stack+0x2c/0x3c (C) [ 162.048049][ T6526] __dump_stack+0x30/0x40 [ 162.048063][ T6526] dump_stack_lvl+0xd8/0x12c [ 162.048077][ T6526] dump_stack+0x1c/0x28 [ 162.048090][ T6526] f2fs_handle_critical_error+0x34c/0x4b8 [ 162.048103][ T6526] f2fs_stop_checkpoint+0x5c/0x70 [ 162.048126][ T6526] f2fs_write_end_io+0x58c/0x818 [ 162.048139][ T6526] bio_endio+0x804/0x840 [ 162.048151][ T6526] submit_bio_noacct+0x158/0x176c [ 162.048165][ T6526] submit_bio+0x354/0x4d4 [ 162.048178][ T6526] f2fs_submit_write_bio+0x13c/0x324 [ 162.048189][ T6526] __submit_merged_bio+0x254/0x704 [ 162.048201][ T6526] __submit_merged_write_cond+0x23c/0x4ac [ 162.048212][ T6526] f2fs_write_data_pages+0x1d28/0x2634 [ 162.048224][ T6526] do_writepages+0x270/0x468 [ 162.048239][ T6526] filemap_fdatawrite+0x144/0x1e8 [ 162.048253][ T6526] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 162.048267][ T6526] f2fs_write_checkpoint+0x684/0x1694 [ 162.048287][ T6526] kill_f2fs_super+0x21c/0x584 [ 162.048299][ T6526] deactivate_locked_super+0xc4/0x12c [ 162.048310][ T6526] deactivate_super+0xe0/0x100 [ 162.048321][ T6526] cleanup_mnt+0x31c/0x3ac [ 162.048333][ T6526] __cleanup_mnt+0x20/0x30 [ 162.048344][ T6526] task_work_run+0x1dc/0x260 [ 162.048355][ T6526] do_notify_resume+0x16c/0x1ec [ 162.048367][ T6526] el0_svc+0xb4/0x17c [ 162.048381][ T6526] el0t_64_sync_handler+0x78/0x108 [ 162.048393][ T6526] el0t_64_sync+0x198/0x19c [ 162.050281][ T6526] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 163.304220][ T7965] --map-set only usable from mangle table [ 163.853370][ T6519] Bluetooth: hci0: command 0x0406 tx timeout [ 163.853670][ T7966] Bluetooth: hci1: command 0x0406 tx timeout [ 163.853731][ T7966] Bluetooth: hci2: command 0x0406 tx timeout [ 163.904427][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 164.061394][ T7974] loop4: detected capacity change from 0 to 1024 [ 164.216664][ T7974] hfsplus: failed to load root directory [ 164.698000][ T7978] syz_tun: entered allmulticast mode [ 164.701157][ T7978] syz_tun: left allmulticast mode [ 167.518914][ T8005] binder: 8003:8005 tried to acquire reference to desc 0, got 1 instead [ 167.528666][ T6571] binder: undelivered TRANSACTION_COMPLETE [ 168.269413][ T6571] binder: undelivered transaction 46, process died. [ 168.511398][ T8020] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 168.536210][ T8020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.286790][ T8025] binder: 8024:8025 tried to acquire reference to desc 0, got 1 instead [ 169.289440][ T8025] loop0: detected capacity change from 0 to 256 [ 169.303154][ T8025] binder: 8024:8025 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 169.303207][ T8025] binder: 8025 RLIMIT_NICE not set [ 169.303610][ T8025] binder: 8025 RLIMIT_NICE not set [ 169.303811][ T8025] binder: send failed reply for transaction 57 to 8024:8025 [ 169.304026][ T8025] binder: 8024:8025 ioctl c0306201 20000180 returned -14 [ 169.304542][ T9] binder: undelivered TRANSACTION_COMPLETE [ 169.304601][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.319345][ T8020] gretap1: entered promiscuous mode [ 169.323414][ T8020] bond1: (slave gretap1): making interface the new active one [ 169.324438][ T8020] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 169.345262][ T8020] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 172.467775][ T8052] loop0: detected capacity change from 0 to 512 [ 172.476573][ T8052] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.488980][ T8052] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #2: block 4: comm syz.0.401: lblock 0 mapped to illegal pblock 4 (length 1) [ 172.499094][ T8052] EXT4-fs (loop0): Remounting filesystem read-only [ 172.542143][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 172.546777][ T8052] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 172.826332][ T8052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.213984][ T8060] loop4: detected capacity change from 0 to 512 [ 173.233743][ T8060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.247197][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.267466][ T8060] EXT4-fs (loop4): 1 truncate cleaned up [ 173.268410][ T8060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.273357][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.273933][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.277140][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.277379][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.277924][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.278251][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.280316][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.280542][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.280786][ T8052] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.401: error -117 reading directory block [ 173.324998][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.566352][ T8073] loop0: detected capacity change from 0 to 1024 [ 174.743856][ T6521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.771559][ T116] hfsplus: b-tree write err: -5, ino 4 [ 174.856749][ T8090] loop0: detected capacity change from 0 to 128 [ 174.950134][ T8090] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 174.965843][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.965916][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.970545][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.970585][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.976245][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.976285][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.976791][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.976824][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.977375][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.977408][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.977842][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.977874][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.978398][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.978431][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.978865][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.978897][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.979805][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.979842][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 174.980480][ T8090] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.414: No space for directory leaf checksum. Please run e2fsck -D. [ 174.980515][ T8090] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.414: checksumming directory block 0 [ 175.454025][ T6526] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.897951][ T8113] syz_tun: entered allmulticast mode [ 176.899416][ T8113] xfrm0: entered allmulticast mode [ 176.903331][ T8113] dvmrp1: entered allmulticast mode [ 176.948179][ T8111] syz_tun: left allmulticast mode [ 178.482166][ T8126] netlink: 'syz.1.421': attribute type 3 has an invalid length. [ 180.264146][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 181.685238][ T8160] binder: 8159:8160 tried to acquire reference to desc 0, got 1 instead [ 181.686162][ T8160] binder: 8159:8160 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 181.686222][ T8160] binder: 8160 RLIMIT_NICE not set [ 181.687102][ T6605] binder: undelivered TRANSACTION_COMPLETE [ 183.035598][ T8181] loop4: detected capacity change from 0 to 512 [ 183.192222][ T8182] binder: 8178:8182 tried to acquire reference to desc 0, got 1 instead [ 183.850428][ T8182] binder: 8178:8182 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 183.850494][ T8182] binder: 8182 RLIMIT_NICE not set [ 183.850525][ T8182] binder: 8182 RLIMIT_NICE not set [ 183.852536][ T8182] binder: 8178:8182 ioctl c0306201 0 returned -14 [ 183.853195][ T6605] binder: release 8178:8182 transaction 67 out, still active [ 183.853236][ T6605] binder: undelivered TRANSACTION_COMPLETE [ 183.870075][ T6605] binder: release 8178:8182 transaction 67 in, still active [ 183.870134][ T6605] binder: send failed reply for transaction 67, target dead [ 184.216869][ T8181] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.439: bad orphan inode 15 [ 184.217397][ T8181] ext4_test_bit(bit=14, block=5) = 0 [ 184.232559][ T8181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.690938][ T8181] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 184.691614][ T8181] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.439: bit already cleared for inode 13 [ 184.727325][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 185.958529][ T6521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.401528][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.401614][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.321666][ T8228] sock: sock_set_timeout: `syz.3.453' (pid 8228) tries to set negative timeout [ 189.703633][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 191.031454][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 191.082934][ T8282] loop4: detected capacity change from 0 to 4096 [ 191.178974][ T8285] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.986390][ T8326] netlink: 48 bytes leftover after parsing attributes in process `syz.3.478'. [ 198.370182][ T8388] netlink: 112 bytes leftover after parsing attributes in process `syz.2.492'. [ 198.376925][ T8388] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 198.470719][ T8392] loop4: detected capacity change from 0 to 1024 [ 198.473353][ T8392] ext3: Unknown parameter 'permit_directio' [ 200.453655][ T8418] loop4: detected capacity change from 0 to 1024 [ 200.471207][ T8418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.483930][ T52] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 200.510348][ T8428] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 200.519925][ T8428] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 201.603559][ T6521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.519604][ T8465] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 202.554708][ T8460] bridge_slave_0: left allmulticast mode [ 202.568002][ T8460] bridge_slave_0: left promiscuous mode [ 202.571188][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.031249][ T8460] bridge_slave_1: left allmulticast mode [ 203.038699][ T8460] bridge_slave_1: left promiscuous mode [ 203.038872][ T8460] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.128159][ T8460] bond0: (slave bond_slave_0): Releasing backup interface [ 203.168674][ T8460] bond0: (slave bond_slave_1): Releasing backup interface [ 203.221991][ T8460] team0: Port device team_slave_0 removed [ 203.235726][ T8460] team0: Port device team_slave_1 removed [ 203.238193][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.249592][ T8460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.252145][ T8460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.338493][ T8465] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.339206][ T6605] syz0: Port: 1 Link DOWN [ 203.362033][ T8476] batman_adv: batadv0: Adding interface: dummy0 [ 203.362091][ T8476] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.362193][ T8476] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 203.406208][ T8490] tipc: Started in network mode [ 203.407395][ T8490] tipc: Node identity ba42c5a634d, cluster identity 4711 [ 203.415997][ T8490] tipc: Enabled bearer , priority 0 [ 203.562830][ T8497] loop0: detected capacity change from 0 to 2048 [ 203.570844][ T8497] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 203.627728][ T8497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 204.102753][ T8478] tipc: Resetting bearer [ 204.206588][ T8477] tipc: Disabling bearer [ 204.527807][ T8520] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 204.581253][ T8520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.521'. [ 204.585838][ T8520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.590956][ T8520] bond1: entered promiscuous mode [ 205.302737][ T8530] mmap: syz.4.523 (8530) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 210.142815][ T8571] loop0: detected capacity change from 0 to 32768 [ 210.143422][ T8571] btrfs: Unknown parameter 'inode_cache' [ 211.113025][ T31] audit: type=1326 audit(211.100:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8592 comm="syz.3.541" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5a8a8 code=0x0 [ 211.756535][ T8597] overlayfs: failed to clone upperpath [ 211.861591][ T8601] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 211.865966][ T8601] Cannot find add_set index 0 as target [ 212.046747][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 212.140812][ T8614] loop0: detected capacity change from 0 to 64 [ 214.378333][ T8635] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 214.385601][ T13] Bluetooth: (null): Invalid header checksum [ 215.254426][ T8643] binder: 8642:8643 tried to acquire reference to desc 0, got 1 instead [ 215.254770][ T8643] binder: 8642:8643 got transaction with invalid fd, -3 [ 215.254799][ T8643] binder: 8643:8642 translate fd array failed [ 215.254876][ T8643] binder: 8642:8643 transaction async to 8642:0 failed 72/29201/-9, code 0 size 96-24 line 3592 [ 215.263892][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.638086][ T52] Bluetooth: hci0: unexpected event for opcode 0x200b [ 217.239863][ T8665] loop0: detected capacity change from 0 to 4096 [ 217.997110][ T8672] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.149234][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 219.150952][ T8684] netlink: 'syz.3.569': attribute type 7 has an invalid length. [ 219.150988][ T8684] netlink: 'syz.3.569': attribute type 8 has an invalid length. [ 219.151011][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 219.156587][ T8684] ip6gretap0: entered promiscuous mode [ 219.157188][ T8684] syz_tun: entered promiscuous mode [ 219.157602][ T8684] gretap0: entered promiscuous mode [ 219.158187][ T8684] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 219.158218][ T8684] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 219.158240][ T8684] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 219.179140][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 219.256575][ T8679] loop4: detected capacity change from 0 to 32768 [ 219.336858][ T8679] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.341049][ T8693] loop0: detected capacity change from 0 to 8 [ 220.359348][ T8693] Illegal XDP return value 3212250632 on prog (id 71) dev N/A, expect packet loss! [ 220.757274][ T8679] XFS (loop4): Ending clean mount [ 220.767797][ T8679] XFS (loop4): Quotacheck needed: Please wait. [ 221.573424][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.580'. [ 222.073256][ T8679] XFS (loop4): Quotacheck: Done. [ 222.135436][ T6521] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.496292][ T31] audit: type=1326 audit(224.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5a8a8 code=0x7ffc0000 [ 225.436323][ T31] audit: type=1326 audit(225.420:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5a8a8 code=0x7ffc0000 [ 225.511988][ T31] audit: type=1326 audit(225.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff89d5a8a8 code=0x7ffc0000 [ 225.512067][ T31] audit: type=1326 audit(225.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89d5a8dc code=0x7ffc0000 [ 225.512107][ T31] audit: type=1326 audit(225.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff89d58f70 code=0x7ffc0000 [ 225.512156][ T31] audit: type=1326 audit(225.490:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff89d5a94c code=0x7ffc0000 [ 225.534140][ T31] audit: type=1326 audit(225.520:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89d58dd4 code=0x7ffc0000 [ 225.534194][ T31] audit: type=1326 audit(225.520:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff89d591ac code=0x7ffc0000 [ 225.534266][ T31] audit: type=1326 audit(225.520:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5a8a8 code=0x7ffc0000 [ 225.535641][ T8762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 226.318477][ T31] audit: type=1326 audit(225.550:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.3.589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89d5a8a8 code=0x7ffc0000 [ 226.528655][ T8772] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 226.529500][ T8772] netlink: 'syz.1.588': attribute type 1 has an invalid length. [ 226.614767][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 226.647190][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 226.650070][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 226.653401][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 226.654247][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 227.206955][ T8776] loop0: detected capacity change from 0 to 512 [ 227.215214][ T8776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 227.223136][ T8776] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 227.232079][ T8776] EXT4-fs (loop0): 1 truncate cleaned up [ 227.232986][ T8776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.279737][ T8779] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 227.358488][ T8783] loop4: detected capacity change from 0 to 64 [ 228.467480][ T8786] bridge_slave_0: left allmulticast mode [ 228.467584][ T8786] bridge_slave_0: left promiscuous mode [ 228.467708][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.481756][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.500778][ T8786] bridge_slave_1: left allmulticast mode [ 228.500854][ T8786] bridge_slave_1: left promiscuous mode [ 228.500994][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.540416][ T8786] bond0: (slave bond_slave_0): Releasing backup interface [ 228.543503][ T8789] netlink: 'syz.1.597': attribute type 10 has an invalid length. [ 228.596559][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.656354][ T8786] bond0: (slave bond_slave_1): Releasing backup interface [ 229.445183][ T8786] team0: Port device team_slave_0 removed [ 229.447606][ T8786] team0: Port device team_slave_1 removed [ 229.447814][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.448443][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.450161][ T8786] bond0: (slave wlan1): Releasing backup interface [ 229.531112][ T8789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.552510][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 229.557203][ T8803] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 231.520532][ T8803] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 232.872601][ T8836] syz_tun: entered allmulticast mode [ 233.021828][ T8831] syz_tun: left allmulticast mode [ 234.352185][ T8861] tmpfs: Unknown parameter 'quot' [ 235.603564][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 235.605497][ T8874] team0: Port device batadv1 added [ 237.921218][ T8903] sch_fq: defrate 2048 ignored. [ 239.290066][ T8919] fuse: Bad value for 'fd' [ 240.266190][ T8930] tipc: Enabling of bearer rejected, failed to enable media [ 240.717273][ T8942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.587058][ T8956] loop4: detected capacity change from 0 to 2048 [ 244.441318][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 244.489004][ T8978] bridge1: entered allmulticast mode [ 244.604612][ T8991] bridge3: entered allmulticast mode [ 247.307028][ T9024] SET target dimension over the limit! [ 248.882602][ T2409] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.882686][ T2409] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.906983][ T9041] binder: 9040:9041 tried to acquire reference to desc 0, got 1 instead [ 248.921911][ T6571] binder: release 9040:9041 transaction 78 out, still active [ 248.921975][ T6571] binder: undelivered TRANSACTION_COMPLETE [ 248.922027][ T6571] binder: undelivered TRANSACTION_COMPLETE [ 248.925834][ T6571] binder: undelivered transaction 77, process died. [ 248.925876][ T6571] binder: send failed reply for transaction 78, target dead [ 249.697412][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 249.731051][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.678'. [ 249.775989][ T9057] syzkaller0: entered promiscuous mode [ 249.777742][ T9057] syzkaller0: entered allmulticast mode [ 249.781645][ T9057] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 250.975572][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.684'. [ 250.978917][ C0] vcan0: j1939_session_tx_dat: 0x0000000059e8f3c6: queue data error: -100 [ 251.958032][ T9087] loop4: detected capacity change from 0 to 512 [ 251.964489][ T9087] EXT4-fs: Ignoring removed bh option [ 251.966146][ T9087] EXT4-fs: Ignoring removed orlov option [ 251.968600][ T9087] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 253.781659][ T9097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.782154][ T9097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.787289][ T9094] loop0: detected capacity change from 0 to 512 [ 254.005226][ T9094] EXT4-fs (loop0): Test dummy encryption mode enabled [ 254.032152][ T9097] netlink: 4344 bytes leftover after parsing attributes in process `syz.4.692'. [ 254.033656][ T9097] netlink: 104 bytes leftover after parsing attributes in process `syz.4.692'. [ 254.370465][ T9094] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #12: comm syz.0.690: corrupted in-inode xattr: invalid ea_ino [ 254.381992][ T9094] EXT4-fs (loop0): Remounting filesystem read-only [ 254.382926][ T9094] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.410765][ T6526] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 255.706101][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 256.969279][ T9] IPVS: starting estimator thread 0... [ 257.074745][ T9130] IPVS: using max 34 ests per chain, 81600 per kthread [ 257.118251][ T9128] netlink: 156 bytes leftover after parsing attributes in process `syz.0.699'. [ 259.290527][ T9141] loop0: detected capacity change from 0 to 40427 [ 259.302169][ T9141] F2FS-fs (loop0): build fault injection rate: 771 [ 259.304917][ T9141] F2FS-fs (loop0): invalid crc value [ 259.388344][ T9141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 260.669439][ T6526] syz-executor: attempt to access beyond end of device [ 260.669439][ T6526] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 260.669552][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 260.669567][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.669575][ T6526] Call trace: [ 260.669579][ T6526] show_stack+0x2c/0x3c (C) [ 260.669600][ T6526] __dump_stack+0x30/0x40 [ 260.669615][ T6526] dump_stack_lvl+0xd8/0x12c [ 260.669628][ T6526] dump_stack+0x1c/0x28 [ 260.669641][ T6526] f2fs_handle_critical_error+0x34c/0x4b8 [ 260.669654][ T6526] f2fs_stop_checkpoint+0x5c/0x70 [ 260.669667][ T6526] f2fs_write_end_io+0x58c/0x818 [ 260.669680][ T6526] bio_endio+0x804/0x840 [ 260.669692][ T6526] submit_bio_noacct+0x158/0x176c [ 260.669705][ T6526] submit_bio+0x354/0x4d4 [ 260.669718][ T6526] f2fs_submit_write_bio+0x13c/0x324 [ 260.669729][ T6526] __submit_merged_bio+0x254/0x704 [ 260.669740][ T6526] __submit_merged_write_cond+0x23c/0x4ac [ 260.669760][ T6526] f2fs_write_data_pages+0x1d28/0x2634 [ 260.669772][ T6526] do_writepages+0x270/0x468 [ 260.669788][ T6526] filemap_fdatawrite+0x144/0x1e8 [ 260.669803][ T6526] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 260.669817][ T6526] f2fs_write_checkpoint+0x684/0x1694 [ 260.669830][ T6526] kill_f2fs_super+0x21c/0x584 [ 260.669842][ T6526] deactivate_locked_super+0xc4/0x12c [ 260.669854][ T6526] deactivate_super+0xe0/0x100 [ 260.669864][ T6526] cleanup_mnt+0x31c/0x3ac [ 260.669876][ T6526] __cleanup_mnt+0x20/0x30 [ 260.669887][ T6526] task_work_run+0x1dc/0x260 [ 260.669899][ T6526] do_notify_resume+0x16c/0x1ec [ 260.669911][ T6526] el0_svc+0xb4/0x17c [ 260.669924][ T6526] el0t_64_sync_handler+0x78/0x108 [ 260.669936][ T6526] el0t_64_sync+0x198/0x19c [ 260.669950][ T6526] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 261.041666][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 261.680385][ T9186] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 261.699932][ T52] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 264.520458][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 264.520537][ T31] audit: type=1107 audit(264.500:46): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 264.782045][ T9235] loop0: detected capacity change from 0 to 128 [ 264.958635][ T9232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.730'. [ 264.968047][ T9235] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.907741][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 267.007318][ T6526] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.018182][ T9230] loop4: detected capacity change from 0 to 4096 [ 267.332198][ T31] audit: type=1107 audit(267.300:47): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='âzÚŸõ' [ 268.192517][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.742'. [ 269.674981][ T9295] netfs: Couldn't get user pages (rc=-14) [ 269.826863][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 269.826924][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 270.782020][ T9280] bridge_slave_0: entered promiscuous mode [ 272.429782][ T9323] loop0: detected capacity change from 0 to 256 [ 272.497263][ T9323] FAT-fs (loop0): Directory bread(block 64) failed [ 272.501678][ T9323] FAT-fs (loop0): Directory bread(block 65) failed [ 272.504293][ T9323] FAT-fs (loop0): Directory bread(block 66) failed [ 272.508398][ T9323] FAT-fs (loop0): Directory bread(block 67) failed [ 272.510554][ T9323] FAT-fs (loop0): Directory bread(block 68) failed [ 272.512877][ T9323] FAT-fs (loop0): Directory bread(block 69) failed [ 272.516152][ T9323] FAT-fs (loop0): Directory bread(block 70) failed [ 272.518355][ T9323] FAT-fs (loop0): Directory bread(block 71) failed [ 272.520623][ T9323] FAT-fs (loop0): Directory bread(block 72) failed [ 272.527816][ T9323] FAT-fs (loop0): Directory bread(block 73) failed [ 272.569750][ T9325] bridge2: entered allmulticast mode [ 277.869045][ T9377] binder: 9376:9377 tried to acquire reference to desc 0, got 1 instead [ 277.876406][ T9377] binder: 9376:9377 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 277.876466][ T9377] binder: 9377 RLIMIT_NICE not set [ 277.876507][ T9377] binder: 9377 RLIMIT_NICE not set [ 277.883663][ T9377] binder: 9377 RLIMIT_NICE not set [ 277.885212][ T9377] binder_alloc: 9376: binder_alloc_buf, no vma [ 277.887229][ T9377] binder: cannot allocate buffer: vma cleared, target dead or dying [ 277.887319][ T9377] binder: 9376:9377 transaction reply to 9376:9377 failed 84/29189/-3, code 0 size 0-0 line 3336 [ 277.887385][ T9377] binder: send failed reply for transaction 83 to 9376:9377 [ 277.896746][ T9377] binder: 9376:9377 got reply transaction with no transaction stack [ 277.899080][ T9377] binder: 9376:9377 transaction reply to 0:0 failed 85/29201/-71, code 0 size 0-0 line 3053 [ 277.903033][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 278.508141][ T6571] binder: undelivered TRANSACTION_ERROR: 29190 [ 278.562108][ T9380] loop0: detected capacity change from 0 to 4096 [ 278.577008][ T9380] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 278.751220][ T9393] netlink: 168 bytes leftover after parsing attributes in process `syz.1.777'. [ 280.519769][ T9401] loop4: detected capacity change from 0 to 128 [ 280.532026][ T9401] EXT4-fs (loop4): Test dummy encryption mode enabled [ 280.647377][ T9401] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.357184][ T6521] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.959872][ T9448] Soft offlining pfn 0x139985 at process virtual address 0x20276000 [ 284.966583][ T9448] Soft offlining pfn 0x139986 at process virtual address 0x20277000 [ 284.966773][ T9448] Soft offlining pfn 0x139987 at process virtual address 0x20278000 [ 284.967341][ T9448] Soft offlining pfn 0x139988 at process virtual address 0x20279000 [ 288.837956][ T9476] loop0: detected capacity change from 0 to 256 [ 288.940586][ T9476] FAT-fs (loop0): count of clusters too big (178174) [ 288.940678][ T9476] FAT-fs (loop0): Can't find a valid FAT filesystem [ 294.667017][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 294.952313][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 295.517310][ T9537] loop4: detected capacity change from 0 to 40427 [ 295.565498][ T9537] F2FS-fs (loop4): build fault injection rate: 771 [ 295.568350][ T9537] F2FS-fs (loop4): invalid crc value [ 295.623502][ T9537] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 295.651798][ T9537] Unable to handle kernel paging request at virtual address dfff800000000018 [ 295.652025][ T9537] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 295.652060][ T9537] Mem abort info: [ 295.652092][ T9537] ESR = 0x0000000096000005 [ 295.652126][ T9537] EC = 0x25: DABT (current EL), IL = 32 bits [ 295.652172][ T9537] SET = 0, FnV = 0 [ 295.652206][ T9537] EA = 0, S1PTW = 0 [ 295.652240][ T9537] FSC = 0x05: level 1 translation fault [ 295.652274][ T9537] Data abort info: [ 295.652306][ T9537] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 295.652340][ T9537] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 295.652376][ T9537] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 295.652417][ T9537] [dfff800000000018] address between user and kernel address ranges [ 295.652603][ T9537] Internal error: Oops: 0000000096000005 [#1] SMP [ 295.677272][ T9537] Modules linked in: [ 295.678345][ T9537] CPU: 1 UID: 0 PID: 9537 Comm: syz.4.816 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 295.681414][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 295.684345][ T9537] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 295.686586][ T9537] pc : find_match+0xa0/0xacc [ 295.687976][ T9537] lr : find_match+0x74/0xacc [ 295.689293][ T9537] sp : ffff80009e3361e0 [ 295.690480][ T9537] x29: ffff80009e336200 x28: 1fffe00018a6b5e6 x27: 1fffe00018a6b5e4 [ 295.692857][ T9537] x26: 00000000000000c0 x25: ffff0000c535af37 x24: 0000000000000201 [ 295.695150][ T9537] x23: 0000000000000002 x22: ffff0000c535af20 x21: 0000000000000000 [ 295.697387][ T9537] x20: dfff800000000000 x19: 0000000000000000 x18: 0000000000000000 [ 295.699648][ T9537] x17: ffff8000891ee3a0 x16: ffff800080520344 x15: 0000000000000002 [ 295.701947][ T9537] x14: 1ffff00013c66c80 x13: 0000000000000000 x12: 0000000000000000 [ 295.704229][ T9537] x11: 0000000000080000 x10: 0000000000ff0100 x9 : 0000000000000002 [ 295.706519][ T9537] x8 : 0000000000000018 x7 : ffff80009e336590 x6 : 0000000000000002 [ 295.708802][ T9537] x5 : ffff80009e336590 x4 : ffff80009e336580 x3 : 0000000000000002 [ 295.711087][ T9537] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 295.713326][ T9537] Call trace: [ 295.714226][ T9537] find_match+0xa0/0xacc (P) [ 295.715542][ T9537] rt6_nh_find_match+0xcc/0x138 [ 295.716932][ T9537] nexthop_for_each_fib6_nh+0x1a8/0x3d0 [ 295.718537][ T9537] __find_rr_leaf+0x3b8/0x5c8 [ 295.719868][ T9537] fib6_table_lookup+0x308/0x8b8 [ 295.721250][ T9537] ip6_pol_route+0x1f8/0x1014 [ 295.722583][ T9537] ip6_pol_route_output+0x60/0x94 [ 295.724066][ T9537] fib6_rule_lookup+0x258/0x45c [ 295.725463][ T9537] ip6_route_output_flags+0x2e4/0x578 [ 295.727003][ T9537] icmpv6_rt_has_prefsrc+0x5c/0x3b8 [ 295.728491][ T9537] icmp6_send+0xa74/0x14d8 [ 295.729728][ T9537] icmpv6_ndo_send+0x134/0x410 [ 295.731093][ T9537] tnl_update_pmtu+0xaa4/0xe3c [ 295.732436][ T9537] ip_tunnel_xmit+0xad8/0x20e8 [ 295.733820][ T9537] ipgre_xmit+0x6ac/0xa18 [ 295.735067][ T9537] dev_hard_start_xmit+0x2b0/0x890 [ 295.736534][ T9537] __dev_queue_xmit+0x15a4/0x31f0 [ 295.737973][ T9537] __bpf_tx_skb+0x1ac/0x2cc [ 295.739250][ T9537] __bpf_redirect+0x5b0/0xb7c [ 295.740597][ T9537] bpf_clone_redirect+0x1f0/0x318 [ 295.742056][ T9537] bpf_prog_da1e0ee5f8d5c8f5+0x84/0xb0 [ 295.743699][ T9537] bpf_test_run+0x2b8/0x7a8 [ 295.745036][ T9537] bpf_prog_test_run_skb+0x9b0/0x12ec [ 295.746570][ T9537] bpf_prog_test_run+0x2b4/0x33c [ 295.748010][ T9537] __sys_bpf+0x4b0/0x614 [ 295.749203][ T9537] __arm64_sys_bpf+0x80/0x98 [ 295.750512][ T9537] invoke_syscall+0x98/0x2b8 [ 295.751826][ T9537] el0_svc_common+0x130/0x23c [ 295.753169][ T9537] do_el0_svc+0x48/0x58 [ 295.754332][ T9537] el0_svc+0x58/0x17c [ 295.755488][ T9537] el0t_64_sync_handler+0x78/0x108 [ 295.756809][ T9537] el0t_64_sync+0x198/0x19c [ 295.758009][ T9537] Code: 979284ec f94002c8 9103011a d343ff48 (38746908) [ 295.759981][ T9537] ---[ end trace 0000000000000000 ]--- [ 295.903734][ T9537] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 295.905999][ T9537] SMP: stopping secondary CPUs [ 295.907401][ T9537] Kernel Offset: disabled [ 295.908549][ T9537] CPU features: 0x2000,000081c0,020004a1,04017203 [ 295.910453][ T9537] Memory Limit: none [ 296.050416][ T9537] Rebooting in 86400 seconds..